With such a system, you must end up trusting a certain entity; it's turtles all the way down otherwise. No system is independently secure. Similar questions in

With such a system, you must end up trusting a certain entity; it's turtles all the way down otherwise. No system is independently secure. Similar questions include: What if a CA is compromised? What if Apple/MS bundles unwanted certs with the OS? What if Intel/AMD biases the on-die hardware RNG or other hardware crypto primitives? What if Apple/MS bundles a backdoored compiler a la "Reflections on Trusting Trust"? What if MS/Apple backdoor the entire network stack, including the physical and data link layers? etc. etc.